CVE-2025-24337: Musing Studio Writefreely

High severity, CVSS 8.4. EPSS: 0.2% chance of exploitation in the next 30 days.

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.

Affected products

• Musing Studio Writefreely: up to and including 0.15.1

Published 2025-01-20. Last modified 2026-06-17.